Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
File: l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft (raw, json)
Hash identifier: WO+vjrQ9xxR9zuj4y4tm8NMm4+tbv2AP6zNCxEbFOaM=
Subject key identifier: 22:7B:79:99:B5:D7:BF:6E:CF:08:F5:A3:4F:21:09:F8:4A:2D:25:74
Authority key identifier: 97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64
Certificate issuer: /CN=9766c6486de74c13d49cca3f0be0224a35ccea64
Certificate serial: 01979C04AD0C33F2F3DC9711260C6B76FC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
Manifest number: 0418
Signing time: Mon 23 Jun 2025 09:00:41 +0000
Manifest this update: Mon 23 Jun 2025 09:00:41 +0000
Manifest next update: Tue 24 Jun 2025 09:00:41 +0000
Files and hashes: 1: Y48MxWheGIg90vL6QjXuK2Ri1Zg.roa (hash: oWPAM3Pv3mMEn0xEixzHycyFbvmileK5Wt76ASUYkxs=)
2: l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl (hash: GIer0SqQppKPgv3xVtXqesR/KUnVlx0kuIBdDn81Bqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:04:ad:0c:33:f2:f3:dc:97:11:26:0c:6b:76:fc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9766c6486de74c13d49cca3f0be0224a35ccea64
Validity
Not Before: Jun 23 09:00:41 2025 GMT
Not After : Jun 24 09:00:41 2025 GMT
Subject: CN=227b7999b5d7bf6ecf08f5a34f2109f84a2d2574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:68:a2:a1:b1:6c:e8:72:ee:5d:06:8f:98:
06:7e:c8:88:99:9a:7d:df:69:71:1b:01:e4:7b:68:
eb:6d:6b:dc:0d:50:26:5c:5c:20:f5:a1:7a:23:9e:
9e:4c:26:56:ba:87:0c:d4:33:8b:f1:cf:55:ac:b7:
02:ec:1a:b3:e6:67:32:36:96:21:a8:ee:83:00:94:
d0:99:f6:0c:55:51:1e:a2:18:8c:5e:a0:57:79:7d:
32:98:f5:8a:f8:72:b7:74:6e:2c:12:db:c0:4f:20:
42:e5:a7:b8:0f:03:26:8b:48:71:af:81:33:4d:0e:
8f:2c:c4:a1:76:9f:f3:30:ac:7c:f4:3b:da:95:83:
b6:f6:b9:c6:8c:b0:cc:36:b0:5a:12:c0:4d:e2:a3:
96:a0:31:c8:78:c3:77:bb:20:33:27:83:e6:a9:b4:
46:0e:3b:70:83:a6:b8:ca:ec:76:2e:ff:cc:4a:fc:
c1:47:8d:66:14:95:f3:21:5c:75:52:c5:6f:be:94:
59:72:91:3a:07:90:2a:2d:03:7e:8b:41:54:b2:26:
5a:b0:98:9e:b9:18:9c:a9:32:28:0f:b8:8e:4e:ea:
e5:f8:db:3c:42:db:41:a0:76:b2:ea:04:ac:84:50:
fd:53:e6:1b:b4:4a:1d:fd:36:50:65:cb:fd:6d:d2:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:79:99:B5:D7:BF:6E:CF:08:F5:A3:4F:21:09:F8:4A:2D:25:74
X509v3 Authority Key Identifier:
keyid:97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ef:dc:e0:d7:30:ee:c6:e5:7c:e0:f7:78:ab:a6:bc:71:6a:
18:92:3c:c0:85:4e:82:ad:63:71:66:3d:d4:c7:f2:49:8c:21:
84:0b:46:b9:39:2e:0b:c7:9f:7e:67:59:00:dc:82:3b:18:c8:
db:41:b2:bb:e7:d1:3a:51:63:2e:55:27:41:c0:c0:df:63:3a:
5f:da:77:d9:be:ef:b8:20:18:ee:7d:a1:35:55:9f:df:5a:e0:
6d:53:7d:7b:6d:fa:62:67:d8:e5:9c:fd:63:29:69:06:cf:4e:
6f:14:be:14:0e:76:ec:59:06:2f:4e:7c:d0:82:86:9d:72:95:
dc:0a:d6:89:59:74:55:0b:b9:8b:fc:c0:56:36:e8:c8:b8:0e:
d7:37:4c:54:c0:56:93:f1:a4:5e:88:67:00:16:e3:57:37:a4:
b9:26:9d:4e:c3:c7:59:ed:3a:e9:ba:b5:b2:97:d1:23:87:c8:
ad:a6:39:2e:25:3b:a4:81:de:13:1b:bc:e2:34:f1:7c:ec:93:
2a:43:33:38:86:1c:43:94:6f:02:7e:c6:13:4f:f0:e3:df:0c:
7f:11:1f:d3:cf:34:86:be:3a:49:9a:5b:0a:e6:ef:c2:b1:42:
9f:12:a9:09:8a:30:d7:61:42:9f:69:1a:fc:09:c9:02:15:25:
2b:f0:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:26 2025 by rpki-client